Re: [openssl-dev] Null pointer dereferences?

[Salz, Rich via openssl-dev]

> The first was in crypto/async/async_wait.c on line 157. `prev` is assigned to
> NULL on 144, and it doesn't look like it is assigned to anything in the while
> loop.

Line 177.
 
> -    OPENSSL_free(clienthello->pre_proc_exts);
> +    if(clienthello) {
> +        OPENSSL_free(clienthello->pre_proc_exts);
> +    }

Without the curly braces :)  yes, this seems like a bug.
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev